Show filters
1 Total Results
Displaying 1-1 of 1
Sort by:
Attacker Value
Unknown

Code execution if run with command line switch -v

Disclosure Date: March 05, 2019 (last updated November 08, 2023)
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.
0